MAL-2025-180117 Malicious code in teate-thy-py-vepes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ead79ecea98073868c95dbaa2347d27243ffc07189a1c5691f8f01e3741497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-adagoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170338258ad69fc79262bb34d1f235ac94de9329c7a784c2eb0d53261af55bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiat-tufam-iubata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109d10fac82b906b1bbd212bf5034964d5245491ba3c08ab42dfd95e35ffdcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-maniac-tanbuy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 196e0848e07fae57dc68fd97b36b2d7bf642f7e183fd86f4a09c1e85e3dff874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantumquester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943d3652d005ad81cdf83cd5fcdd69a98674e514251b635c32ec7ee998a97a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gsasasd-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b58062c05ba83b35c72bbec12ab4eee6a724e2c6c227a0b1518f333794ded4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad61d3f4ca6c6e2d25616fd0e172ef1b14835bf583dd586fbb48cd20e6cae35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160142 Malicious code in masako-be-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398fe1098bde6f56dc07c7540c143ec5e544478a184bd8e068c6cbabf1eb461b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158023 Malicious code in layla-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e46800bed346ac9667318c49bd2b1c133cdc09dd722cea19c9abb5124f2355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-heka-shelljs-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1321402d373619ab428b9424583b9f795bb5713d9ceb5a919bcf553760974a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146523 Malicious code in prettier-stylelint-webdriverio-xerxes-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46c7044db02697faa91ea47e9e00a9fe04e7e7215ebd93e223558d8c16fd72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144070 Malicious code in jwt-bulma-private-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6440b82a3e373f0f05f339f463a887f1b1c5f60136c927d1d72f65b011de2bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149057 Malicious code in ursa-hapi-nextjs-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc029820500dd4024972c48dd57913360342c872ec20c9566e573b7bfa03dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131967 Malicious code in agus-lengko76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227753893f63f5a7ef384f472e965f730e2ba27a1ef6aacd34c433aca9983cf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131199 Malicious code in wati-taiwan42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a613d3f08f619d2071d4e7edab430e63b9fc5b084d884dae7ff3fce521eadad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-dradag32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d1e345161cc470b42635b8e8ad4790597c0899a5dad5c7e633bd359ffa87b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in separate_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c3d97701fdae7bc0b65da338247a7d30b35e1e9c978580b2a418cdcd033ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100768 Malicious code in complete_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969d71aca390e2a8f14d219d3c9a9218fa3b0a49949a103276dd18c2a0934352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105561 Malicious code in maman-sambel99-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b1e68adb9085818f108206924489f7f78635cf15c2c395beec3b4f40428a7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-nasipecel8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2217afcf872bb28550a18263cbe28bfa46cb6c730e6ab67af2e5ffbe07c5e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...